0086eee31175c49ac5bd407c20ac665a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0086eee31175c49ac5bd407c20ac665a_JaffaCakes118
Size

43KB
MD5

0086eee31175c49ac5bd407c20ac665a
SHA1

f738e52666d96a0f95ff572529edebeaf1041698
SHA256

5898861c911dc9381569befc0d942a932b244222c4ae2e4b60eeba79c09c10e2
SHA512

f2792a75bb386e53aaea45ef8e776288fa195bc366d19f36d446b59439a85fd3b34001fc8f162ab56a6d5ed7ef89aa11412fd24ac691448ea38130574c714ec4
SSDEEP

768:J/0lx4NU/2BlSjxlcH2qv6I8sAVObTeXeUaLf1Rf+Nf5MZsXkm:J/K4Nc2Nv6b9aelf5XUm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0086eee31175c49ac5bd407c20ac665a_JaffaCakes118

Files

0086eee31175c49ac5bd407c20ac665a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

.text
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ